Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-4022
HistorySep 11, 2023 - 8:15 p.m.

Cross site scripting

2023-09-1120:15:00
PRIOn knowledge base
www.prio-n.com
1
herd effects
wordpress
stored xss
admin privilege
unfiltered_html
multisite setup

0.0004 Low

EPSS

Percentile

14.0%

The Herd Effects WordPress plugin before 5.2.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)

CPENameOperatorVersion
herd_effectslt5.2.3

0.0004 Low

EPSS

Percentile

14.0%

Related for PRION:CVE-2023-4022